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Amendments to the Claims : 

A listing of the entire set of pending claims (including amendments to the 
claims, if any) is submitted herewith per 37 CFR 1.121. This listing of claims will 
replace all prior versions, and listings, of claims in the application. 

Listing of Claims: 

1 . (Currently amended) A method of generating a common secret between a first 
party - machine and a second-party machine , in wh i ch w herein the first-part y machine 
holds a value pi and a symmetrical polynomial P(x,y) fixed in the first argument by 
the value pi, and the first party machine performs the steps of: 

sending the value pi to the second-Bart y machine , 

receiving a value p 2 from the second-Barty machine and 

calculating the common secret Si by evaluating the polynomial P(pi, y) in p 2 , 

wherein the first party machine additionally holds a value qi and a symmetrical 

polynomial Q(x, z) fixed in the first argument by the value qi, and further performs the 

steps of: 

sending q! to the second-part y machine . 

receiving a value q 2 from the second party machine and 

calculating the secret Si as Si=Q(qi, q 2 ) P(pi, p 2 ). 

2. (Currently amended) The method of claim 1 , i n wh i ch wherein the first party 
machine further performs the steps of: 

obtaining a random number n, 

calculating rvqi, sending r r qi to the second party machine . 

receiving r 2 -q 2 from the second party machine, and 

calculating the secret Si as Si=Q(qi, r 1 r 2 q 2 ) P(p l , p 2 ). 
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3. (Currently amended) The method of claim 2, i n wh i ch wherein the first party 
machine holds the value qi multiplied by an arbitrarily chosen value r, and the 
product Q(qi, z)P(pi, y) instead of the individual polynomials P(pi, y) and Q(qi, z), 
and the first-part y machine performs the steps of: 

calculating ry r-q 1( 

sending H-r^ to the second-part y machine , 

receiving r 2 r-q 2 from the second^art y machine, and 

calculating the secret Si as Si=Q(qi, r 1 -r 2 r q 2 ) P(pi, p 2 ). 

4. (Currently amended) The method of claim 1 , i n wh i ch wherein the second-party 
machine holds a value p 2 and a value q 2 , the symmetrical polynomial P(x, y) fixed in 
the first argument by the value p 2j the symmetrical polynomial Q(x, z) fixed in the first 
argument by the value q 2 , and the second-party machine performs the steps of: 
sending q 2 to the first-party machine , 

receiving qi from the first-part y machine and 

calculating a secret S 2 as S 2 =Q(q 2 , qi)P(p 2 , pi), whoroby the common secret 

has boon being generated if the secret S 2 equals the secret Si. 

5. (Currently amended) The method of claim 1 , i n wh i ch wherein a trusted third party 
machine performs the steps of: 

choosing a symmetric (n+1) x (n+1) matrix T, 

constructing the polynomial P using entries from the matrix T as respective 

coefficients of the polynomial P, 

constructing the polynomial Q(x, y), 

choosing the value pi, the value p 2 , the value qi and the value q 2 , 

sending the value pi, the value qi, the polynomial P(x, y) fixed in the first 

argument by the value pi and the polynomial Q(x, z) fixed in the first argument by the 
value qi to the first-part y machine , and 

sending the value p 2> the value q 2 , the polynomial P(x, y) fixed in the first 

argument by the value p 2 and the polynomial Q(x, z) fixed in the first argument by the 
value q 2 to the second party machine 
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6. (Currently amended) The method of claim 5, i n wh i ch wherein the trusted third 
part y machine further: 

arbitrarily chooses a value r, 

sends the value r-qi instead of the value qi and the product Q(q u z)P(p 1 , y) 

instead of the individual polynomials P(pi, y) and Q(qi, z) to the first party machine 
and 

sends the value rq 2 instead of the value q 2 and the product Q(q 2 , z)P(p 2 , y) 

instead of the individual polynomials P(p 2 , y) and Q(q 2 , z) to the second party 
machine . 

7. (Currently amended) The method of claim 5, i n wh i ch wherein the trusted third 
party machine further performs the steps of 

choosing a set comprising m values p„ including the values pi and p 2 , 
calculating a space A from the tensor products pj <8> p v - of the Vandermonde 

vectors pj built from the set of values pi, 

choosing a vector y x and a vector f 2 from the perpendicular space A 1 of the 
space A, 

constructing a matrix t Fi = T+n from the vector y x and a matrix T r2 = T+r 2 

from the vector f 2 , 

constructing a polynomial P fl (x,y) using entries from the matrix t Fi and 

sending the polynomial P fl (x,y) fixed in the first argument by the value pi to 

the first party machine , and 

constructing a polynomial P r 2 (x,y) using entries from the matrix T r2 and 

sending the polynomial P r 2 (x,y) fixed in the first argument by the value p 2 to 

the second-part y machine . 
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8. (Currently amended) The method of claim 5, i n wh i ch wherein a number m' of 
values pi, and m' < m, are distributed to additional parties. 

9. (Currently amended) The method of claim 1 , i n wh i ch wherein the first party 
machine and the second party machine use a non-linear function on the generated 
secret S1 and S2, respectively, before using it as a secret key in further 
communications. 

10. (Currently amended) The method of claim 9 . wherein i n wh i ch a one-way hash 
function is applied to the generated secrets S1 and S2. 

1 1 . (Currently amended) The method of claim 9 , wherein i n wh i ch a non-linear 
function in the form of a polynomial is applied to the generated secrets S1 and S2. 

12. (Currently amended) The method of claim 1 , further comprising the step of 
verifying that the second party machine knows the secret Si . 

13. (Currently amended) The method of claim 12, i n wh i ch wherein the first party 
machine subsequently applies a zero-knowledge protocol to verify that the second 
part y machine knows the secret Si. 

14. (Currently amended) The method of claim 12, i n wh i ch wherein the first party 
machine subsequently applies a commitment-based protocol to verify that the second 
part y machine knows the secret Si. 

15. (Currently amended) The method of claim 14, in wh i ch wherein the second party 
machine uses a symmetric cipher to encrypt a random challenge, and sends the 
encrypted random challenge to the first-part y machine and the first-part y machine 
subsequently uses the same symmetric cipher as a commit function to commit 
h i ms el f itself to a decryption of the encrypted random challenge. 
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16. (Currently amended) A system comprising: 

a first party machine . 

a second-party machine and 

a trusted third-party machine , that is arranged to generate a common secret 
between the first party machine and the second party machine , i n wh i ch 
wherein: 

the first-party machine holds a value pi and a symmetrical polynomial P(x,y) 

fixed in the first argument by the value pi, and the first-part y machine performs the 

steps of: sending the value pi to the second party machine . 

receiving a value p 2 from the second party machine and 

calculating the common secret Si by evaluating the polynomial P(pi, y) 

in p 2 , wh e r ei n and 

the first party machine additionally holds a value qi and a symmetrical 

polynomial Q(x, z) fixed in the first argument by the value qi, and further performs the 
steps of: 

sending q! to the second-part y machine . 

receiving a value q 2 from the second-party machine and 

calculating the secret Si as Si=Q(qi, q 2 ) P(pi, p 2 ). 

17. (Currently amended) A device (P) arranged to comprising : 

a memory that is configured to hold a value p-\, a symmetrical polynomial 
P(x,y) fixed in the first argument by the value p-i, a value qi, and a symmetrical 
polynomial Q(x, z) fixed in the first argument by the value qi, 

a transceiver that is configured to send the value pi to a second party 
machine , and receive a value p 2 from the second-party machine , and 

a processor that is configured to evaluate the polynomial P(pi, y) in p 2 , 
wherein: 

the transceiver is configured to send qi to the second party machine , r e c ei v i ng 

and receive a value q 2 from the second-part y machine , and 

the processor is configured to evaluate the polynomial Q(qi, q 2 ), and calculate 
a secret Si as Si=Q(qi, q 2 ) P(pi, p 2 ). 
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18. (Currently amended) The device of claim 1 7, compr i s i ng storag e m e ans for 
stertnq- wherein the memory is configured to store the polynomial P and the 
polynomial Q in the form of their respective coefficients. 

19. (Currently amended) A computer readable media that includes a program product 
for causing one or more processors to generate a common secret between a first 
part y machine and a second-party machine , in wh i ch w herein the first-part y machine 
holds a value pi and a symmetrical polynomial P(x,y) fixed in the first argument by 
the value pi, and the first party machine performs the steps of: 

sending the value pi to the second-part y machine , 

receiving a value p 2 from the second-party machine and 

calculating the common secret Si by evaluating the polynomial P(pi, y) in p 2 , 

wherein the first party machine additionally holds a value qi and a symmetrical 
polynomial Q(x, z) fixed in the first argument by the value qi, and further performs the 
steps of: 

sending q! to the second-part y machine . 

receiving a value q 2 from the second party machine and 

calculating the secret Si as Si=Q(qi, q 2 )P(pi, P2). 

20. (Currently amended) The system of claim 16, wherein the second-party machine 
holds a value p 2 and a value q 2 , the symmetrical polynomial P(x, y) fixed in the first 
argument by the value p 2 , the symmetrical polynomial Q(x, z) fixed in the first 
argument by the value q 2 , and the second party machine performs the steps of: 
sending q 2 to the first-party machine , 

receiving q! from the first-party machine and 

calculating a secret S 2 as S 2 =Q(q 2 , qi)P(p 2 , pi), wh e r e by the common secret 

has b ee n being generated if the secret S 2 equals the secret Si . 
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